Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: dS+ukuASEoGBM9TNqRY/6rfw1fM0yI0EjvoI5bdzQ2o=
Subject key identifier: D5:A7:23:E6:45:CC:3D:97:AB:29:00:9D:0F:A2:65:A4:93:12:45:38
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 019511A2C9002831232BA0361EC9FA3F095C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 1169
Signing time: Mon 17 Feb 2025 02:00:35 +0000
Manifest this update: Mon 17 Feb 2025 02:00:35 +0000
Manifest next update: Tue 18 Feb 2025 02:00:35 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: z8nkzaOqt9pQqUMGyyhTnrW9m5n9EBtn+Czifkm/Vfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c9:00:28:31:23:2b:a0:36:1e:c9:fa:3f:09:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Feb 17 02:00:35 2025 GMT
Not After : Feb 18 02:00:35 2025 GMT
Subject: CN=d5a723e645cc3d97ab29009d0fa265a493124538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e3:f4:8e:59:c1:f5:e9:13:a3:14:bb:71:02:
0e:20:78:2e:6e:ec:d9:b3:a6:f2:72:4f:b7:45:56:
a2:38:60:91:0c:56:b0:16:4e:29:a7:fa:15:2c:ba:
fe:33:6e:58:5b:32:de:88:55:5f:13:23:33:40:cf:
e6:0b:d2:0b:fe:72:cf:a4:f9:5e:8d:3c:ad:9e:ad:
41:6f:a8:2e:76:83:39:f5:a3:09:97:01:88:93:0d:
81:7f:96:c5:41:3c:ba:63:b9:86:59:67:84:5f:a4:
93:9b:67:d3:47:1a:fa:57:b1:24:16:98:db:7c:0c:
34:c5:06:e7:91:97:75:10:5b:da:82:2b:ed:e4:c7:
c0:06:9d:9b:08:8f:c8:0d:e0:82:4b:cb:fb:27:78:
80:b5:ea:38:24:42:67:49:74:66:8d:fd:d0:71:2d:
67:0c:96:45:40:ec:3e:28:d6:e6:83:27:db:c3:81:
48:8c:88:88:30:d1:a6:df:42:f8:28:87:c8:a3:d5:
bb:64:36:a6:eb:95:0c:50:2d:b9:14:06:43:93:fb:
67:22:19:2f:c2:53:8c:33:50:2c:1d:45:1d:b8:97:
ba:47:81:33:73:0d:56:47:61:df:31:f8:f6:85:08:
bc:9a:ea:37:eb:46:eb:63:54:86:67:96:af:f7:df:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:23:E6:45:CC:3D:97:AB:29:00:9D:0F:A2:65:A4:93:12:45:38
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7c:cb:e2:ce:e6:08:10:06:50:01:27:a4:70:59:8a:2d:a9:
1e:ca:43:a1:05:6a:3f:af:d4:27:65:05:4c:7b:78:dd:27:41:
21:5b:48:99:e6:6b:88:e4:8e:f2:84:43:f4:fb:5c:2f:69:73:
52:b7:92:aa:1d:ba:63:32:a6:09:d6:55:05:13:b7:6f:61:84:
78:bc:36:5d:fa:6e:eb:32:64:08:c6:42:7e:27:bb:74:c0:c3:
15:06:81:3d:17:dc:35:49:06:43:49:d4:f1:ff:e9:6f:d9:7f:
10:b4:2c:3a:1a:49:a0:07:df:72:8d:88:9d:c8:f9:dd:c7:6a:
26:0c:f7:0b:fa:9a:28:37:70:95:a0:72:67:e4:87:24:b2:49:
1a:5a:b8:89:4e:5d:b9:ee:18:04:4a:b6:4e:36:58:28:98:e5:
69:30:41:74:b4:5d:7c:e2:a3:7f:ea:3a:c9:b3:09:42:fb:75:
70:38:ed:63:74:91:02:2d:e9:aa:75:3e:78:b7:b2:d1:7c:e2:
43:f3:5e:a1:41:f5:e6:05:de:70:95:e5:9d:20:b1:16:c1:64:
4b:5d:86:09:7f:77:58:90:c1:ce:a7:0c:82:c3:80:63:71:b8:
a7:41:fc:12:21:0d:9f:5c:75:01:77:49:69:0c:12:f3:bc:c8:
41:1d:db:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:57 2025 by rpki-client